/*
 * Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements.  See the NOTICE file distributed with
 * this work for additional information regarding copyright ownership.
 * The ASF licenses this file to You under the Apache License, Version 2.0
 * (the "License"); you may not use this file except in compliance with
 * the License.  You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.apache.ranger.patch;

import org.apache.commons.lang.StringUtils;
import org.apache.ranger.biz.RangerBizUtil;
import org.apache.ranger.biz.ServiceDBStore;
import org.apache.ranger.common.JSONUtil;
import org.apache.ranger.common.RangerValidatorFactory;
import org.apache.ranger.common.StringUtil;
import org.apache.ranger.db.RangerDaoManager;
import org.apache.ranger.entity.XXServiceDef;
import org.apache.ranger.plugin.model.RangerServiceDef;
import org.apache.ranger.plugin.model.validation.RangerServiceDefValidator;
import org.apache.ranger.plugin.model.validation.RangerValidator.Action;
import org.apache.ranger.plugin.store.EmbeddedServiceDefsUtil;
import org.apache.ranger.service.RangerPolicyService;
import org.apache.ranger.service.XPermMapService;
import org.apache.ranger.service.XPolicyService;
import org.apache.ranger.util.CLIUtil;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;

import java.util.List;
import java.util.Map;

@Component
public class PatchForHiveServiceDefUpdate_J10010 extends BaseLoader {
    private static final Logger logger = LoggerFactory.getLogger(PatchForHiveServiceDefUpdate_J10010.class);

    public static final String SERVICEDBSTORE_SERVICEDEFBYNAME_HIVE_NAME = "hive";
    public static final String HIVE_SERVICE_RESOURCE_NAME                = "hiveservice";

    @Autowired
    RangerDaoManager daoMgr;

    @Autowired
    ServiceDBStore svcDBStore;

    @Autowired
    JSONUtil jsonUtil;

    @Autowired
    RangerPolicyService policyService;

    @Autowired
    StringUtil stringUtil;

    @Autowired
    XPolicyService xPolService;

    @Autowired
    XPermMapService xPermMapService;

    @Autowired
    RangerBizUtil bizUtil;

    @Autowired
    RangerValidatorFactory validatorFactory;

    @Autowired
    ServiceDBStore svcStore;

    public static void main(String[] args) {
        logger.info("main()");

        try {
            PatchForHiveServiceDefUpdate_J10010 loader = (PatchForHiveServiceDefUpdate_J10010) CLIUtil.getBean(PatchForHiveServiceDefUpdate_J10010.class);

            loader.init();

            while (loader.isMoreToProcess()) {
                loader.load();
            }

            logger.info("Load complete. Exiting!!!");

            System.exit(0);
        } catch (Exception e) {
            logger.error("Error loading", e);

            System.exit(1);
        }
    }

    @Override
    public void init() throws Exception {
        // Do Nothing
    }

    @Override
    public void printStats() {
        logger.info("PatchForHiveServiceDefUpdateForResourceSpecificAccesses data ");
    }

    @Override
    public void execLoad() {
        logger.info("==> PatchForHiveServiceDefUpdateForResourceSpecificAccesses.execLoad()");

        try {
            updateHiveServiceDef();
        } catch (Exception e) {
            logger.error("Error whille updateHiveServiceDef()data.", e);
        }

        logger.info("<== PatchForHiveServiceDefUpdateForResourceSpecificAccesses.execLoad()");
    }

    private void updateHiveServiceDef() {
        try {
            RangerServiceDef embeddedHiveServiceDef = EmbeddedServiceDefsUtil.instance().getEmbeddedServiceDef(SERVICEDBSTORE_SERVICEDEFBYNAME_HIVE_NAME);

            if (embeddedHiveServiceDef != null) {
                XXServiceDef xXServiceDefObj = daoMgr.getXXServiceDef().findByName(SERVICEDBSTORE_SERVICEDEFBYNAME_HIVE_NAME);

                if (xXServiceDefObj == null) {
                    logger.error("Service def for {} is not found!!", SERVICEDBSTORE_SERVICEDEFBYNAME_HIVE_NAME);

                    return;
                }

                String              jsonStrPreUpdate           = xXServiceDefObj.getDefOptions();
                Map<String, String> serviceDefOptionsPreUpdate = jsonUtil.jsonToMap(jsonStrPreUpdate);
                String              valueBeforeUpdate          = serviceDefOptionsPreUpdate.get(RangerServiceDef.OPTION_ENABLE_DENY_AND_EXCEPTIONS_IN_POLICIES);
                RangerServiceDef    dbHiveServiceDef           = svcDBStore.getServiceDefByName(SERVICEDBSTORE_SERVICEDEFBYNAME_HIVE_NAME);

                if (dbHiveServiceDef != null) {
                    boolean isServiceDefUpdated = updateServiceDef(dbHiveServiceDef, embeddedHiveServiceDef);

                    if (isServiceDefUpdated) {
                        xXServiceDefObj = daoMgr.getXXServiceDef().findByName(SERVICEDBSTORE_SERVICEDEFBYNAME_HIVE_NAME);

                        if (xXServiceDefObj != null) {
                            String              jsonStrPostUpdate           = xXServiceDefObj.getDefOptions();
                            Map<String, String> serviceDefOptionsPostUpdate = jsonUtil.jsonToMap(jsonStrPostUpdate);
                            String              valueAfterUpdate            = serviceDefOptionsPostUpdate.get(RangerServiceDef.OPTION_ENABLE_DENY_AND_EXCEPTIONS_IN_POLICIES);

                            if (!StringUtils.equals(valueBeforeUpdate, valueAfterUpdate)) {
                                if (StringUtils.isEmpty(valueBeforeUpdate)) {
                                    serviceDefOptionsPostUpdate.remove(RangerServiceDef.OPTION_ENABLE_DENY_AND_EXCEPTIONS_IN_POLICIES);
                                } else {
                                    serviceDefOptionsPostUpdate.put(RangerServiceDef.OPTION_ENABLE_DENY_AND_EXCEPTIONS_IN_POLICIES, valueBeforeUpdate);
                                }

                                xXServiceDefObj.setDefOptions(mapToJsonString(serviceDefOptionsPostUpdate));

                                daoMgr.getXXServiceDef().update(xXServiceDefObj);
                            }
                        }
                    }
                }
            }
        } catch (Exception e) {
            logger.error("Error while updating {} service-def", SERVICEDBSTORE_SERVICEDEFBYNAME_HIVE_NAME, e);
        }
    }

    private boolean updateServiceDef(RangerServiceDef serviceDef, RangerServiceDef embeddedHiveServiceDef) throws Exception {
        boolean ret = false;

        List<RangerServiceDef.RangerResourceDef>   embeddedHiveResourceDefs = embeddedHiveServiceDef.getResources();
        List<RangerServiceDef.RangerAccessTypeDef> embeddedHiveAccessTypes  = embeddedHiveServiceDef.getAccessTypes();

        if (checkHiveServiceresourcePresent(embeddedHiveResourceDefs)) {
            // This is to check if HIVESERVICE def is added to the resource definition, if so update the resource def and accessType def
            if (embeddedHiveResourceDefs != null) {
                serviceDef.setResources(embeddedHiveResourceDefs);
            }

            if (embeddedHiveAccessTypes != null) {
                if (!embeddedHiveAccessTypes.toString().equalsIgnoreCase(serviceDef.getAccessTypes().toString())) {
                    serviceDef.setAccessTypes(embeddedHiveAccessTypes);
                }
            }

            ret = true;
        }

        RangerServiceDefValidator validator = validatorFactory.getServiceDefValidator(svcStore);

        validator.validate(serviceDef, Action.UPDATE);

        svcStore.updateServiceDef(serviceDef);

        return ret;
    }

    private boolean checkHiveServiceresourcePresent(List<RangerServiceDef.RangerResourceDef> resourceDefs) {
        boolean ret = false;

        for (RangerServiceDef.RangerResourceDef resourceDef : resourceDefs) {
            if (HIVE_SERVICE_RESOURCE_NAME.equals(resourceDef.getName())) {
                ret = true;
                break;
            }
        }

        return ret;
    }

    private String mapToJsonString(Map<String, String> map) {
        String ret = null;

        if (map != null) {
            ret = jsonUtil.readMapToString(map);
        }

        return ret;
    }
}
